Skip to content

ci(renovate): group cargo / github-actions updates and enable lockFileMaintenance#1307

Draft
jd wants to merge 1 commit intomainfrom
devs/jd/worktree-rust-port/group-cargo-github-actions-updates-enable--7506fae5
Draft

ci(renovate): group cargo / github-actions updates and enable lockFileMaintenance#1307
jd wants to merge 1 commit intomainfrom
devs/jd/worktree-rust-port/group-cargo-github-actions-updates-enable--7506fae5

Conversation

@jd
Copy link
Copy Markdown
Member

@jd jd commented Apr 27, 2026

The Rust workspace is growing fast — 5 crates already, more landing as
the port progresses. Without grouping, every minor/patch bump from
crates.io produces its own PR; with two managers (cargo and
github-actions) on a stack of stacked PRs that quickly drowns review.

  • Group cargo minor/patch updates into a single weekly PR.
  • Group github-actions minor/patch updates the same way.
  • Enable lockFileMaintenance for Cargo.lock (Monday morning) so
    indirect dep drift doesn't accumulate between explicit Cargo.toml
    changes.

Major bumps still get their own PR (default behaviour kept) so they
stay easy to triage individually.

…eMaintenance

The Rust workspace is growing fast — 5 crates already, more landing as
the port progresses. Without grouping, every minor/patch bump from
crates.io produces its own PR; with two managers (`cargo` and
`github-actions`) on a stack of stacked PRs that quickly drowns review.

- Group `cargo` minor/patch updates into a single weekly PR.
- Group `github-actions` minor/patch updates the same way.
- Enable `lockFileMaintenance` for `Cargo.lock` (Monday morning) so
  indirect dep drift doesn't accumulate between explicit Cargo.toml
  changes.

Major bumps still get their own PR (default behaviour kept) so they
stay easy to triage individually.

Change-Id: I7506fae52e2c6bfb2c12af80391b1eb07a9b93f0
Copilot AI review requested due to automatic review settings April 27, 2026 07:03
@jd
Copy link
Copy Markdown
Member Author

jd commented Apr 27, 2026

This pull request is part of a Mergify stack:

# Pull Request Link
1 ci(renovate): group cargo / github-actions updates and enable lockFileMaintenance #1307 👈
2 feat(rust): add mergify-core::http with retry + typed errors (Phase 1.2b) #1281
3 feat(rust): port config validate to native Rust (Phase 1.3) #1282
4 test: add port-inventory guard to catch un-ported Python commands #1296
5 ci: add Rust release workflow targeting GitHub Release assets #1297
6 feat(rust): port config simulate to native Rust (Phase 1.3b) #1298
7 feat(rust): port ci scopes-send to native Rust (Phase 1.4) #1300
8 feat(rust): port queue pause and unpause to native Rust (Phase 1.5) #1301
9 feat(rust): port ci git-refs and ci queue-info to native Rust (Phase 1.6) #1302

@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented Apr 27, 2026

Merge Protections

Your pull request matches the following merge protections and will not be merged until they are valid.

🔴 👀 Review Requirements

Waiting for:

  • #approved-reviews-by>=2
This rule is failing.
  • any of:
    • #approved-reviews-by>=2
    • author = dependabot[bot]
    • author = mergify-ci-bot
    • author = renovate[bot]

🔴 🔎 Reviews

Waiting for:

  • #review-requested = 0
  • #review-threads-unresolved = 0
This rule is failing.
  • #review-requested = 0
  • #review-threads-unresolved = 0
  • #changes-requested-reviews-by = 0

🟢 🤖 Continuous Integration

Wonderful, this rule succeeded.
  • all of:
    • check-success=ci-gate

🟢 Enforce conventional commit

Wonderful, this rule succeeded.

Make sure that we follow https://www.conventionalcommits.org/en/v1.0.0/

  • title ~= ^(fix|feat|docs|style|refactor|perf|test|build|ci|chore|revert|ui)(?:\(.+\))?:

🟢 📕 PR description

Wonderful, this rule succeeded.
  • body ~= (?ms:.{48,})

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates Renovate configuration to reduce dependency update PR noise as the Rust workspace grows, by grouping related updates and enabling periodic lockfile maintenance.

Changes:

  • Enable Renovate lockFileMaintenance on a Monday-morning schedule.
  • Group cargo minor/patch updates into a single PR.
  • Group github-actions minor/patch updates into a single PR.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread renovate.json
Comment on lines +6 to +11
"lockFileMaintenance": {
"enabled": true,
"schedule": [
"before 5am on monday"
]
},
Copy link

Copilot AI Apr 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lockFileMaintenance is enabled globally, so Renovate will run lockfile maintenance PRs for all supported lockfiles in the repo (e.g., uv.lock in addition to Cargo.lock). The PR description says this is intended only for Cargo.lock; consider disabling lockfile maintenance by default and re-enabling it only for the cargo manager (or filtering to Cargo.lock if supported) via packageRules targeting matchUpdateTypes: ["lockFileMaintenance"].

Copilot uses AI. Check for mistakes.
Comment thread renovate.json
Comment on lines +13 to +22
{
"matchManagers": [
"cargo"
],
"matchUpdateTypes": [
"minor",
"patch"
],
"groupName": "Cargo minor/patch updates"
},
Copy link

Copilot AI Apr 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This rule groups Cargo minor/patch updates, but it doesn’t actually make them weekly as stated in the PR description. If the intent is a single weekly PR, add an explicit schedule (either in this packageRule or via a global/preset weekly schedule) so Renovate won’t open/update the grouped PR continuously throughout the week.

Copilot uses AI. Check for mistakes.
Comment thread renovate.json
Comment on lines +23 to +32
{
"matchManagers": [
"github-actions"
],
"matchUpdateTypes": [
"minor",
"patch"
],
"groupName": "GitHub Actions minor/patch updates"
}
Copy link

Copilot AI Apr 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This rule groups GitHub Actions minor/patch updates, but there’s no schedule configured to make it a weekly PR as described. Add an explicit schedule for this rule (or a global/preset weekly schedule) to align behavior with the PR description.

Copilot uses AI. Check for mistakes.
@mergify mergify Bot requested a review from a team April 27, 2026 07:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

2 participants